This is a key element of the EU Action Plan on Cable Security and the 2024 Cables Recommendation, addressing the security and resilience of critical undersea communication and energy cables.

Submarine cables carry 99% of inter-continental internet traffic and are key to energy security, connecting energy markets and supporting offshore renewables. However, a rise in submarine cable incidents has increased concerns about disruptions in this critical infrastructure in the EU.

The mapping of cable infrastructures is based on various public sources and covers capacity, technical specifications, ownership, registered incidents, landing sites and information on installation, maintenance and repair processes.

The risk assessment approach flags a number of threats, vulnerabilities and dependencies, consolidated within several risk scenarios.  This analysis is broken down between physical and cyber security threats and vulnerabilities, considers both intentional and unintentional damage, and reviews dependencies across supply chains and geographies, as well as technical, legal and administrative elements.

Executive Vice-President for Tech Sovereignty, Security and Democracy said:

“Agreeing on the infrastructure mapping and coordinated risk assessment is the first key building block in implementing our EU Action Plan on Cable Security. This EU-wide guidance will help ensure that these infrastructures we all depend on are secure and resilient.”

The informal Expert Group is made up of representatives of all EU Member States, the Commission and the European Agency for Cybersecurity (ENISA). As a next step, the Expert Group is developing guidance to conduct stress tests of submarine cable infrastructures, a ‘Cable Security Toolbox’ of measures to mitigate the identified risks, and a priority list of Cable Projects of European Interest (CPEIs).